Privacy policy

The short version

We collect an email address, whatever you type into an order, and the technical minimum needed to run the site. We do not sell data, we do not run advertising trackers, and game account credentials are deleted when your order closes.

What we collect

• Account data — email address, an optional display name, and a hashed password. Passwords are stored as bcrypt hashes and are never recoverable, by us or anyone else.
• Order data — the configuration you selected, the price, your contact details, and any notes you added. This is what lets us deliver and support the order.
• Payment data — the invoice reference, coin, amount and status returned by our payment processor. We never see or hold a wallet private key, and there is no card data anywhere because we do not accept cards.
• Game credentials — only when you provide them for a solo order, only in the private order channel, and only for the life of that order.
• Technical data — a session cookie when you are signed in, plus standard server logs (IP address, user agent, requested path) retained for a short period for security and debugging.

Cookies

The only cookie this site sets is the session cookie that keeps you signed in. It is httpOnly, same-site, and expires after 30 days. There are no advertising or cross-site tracking cookies, which is also why you are not seeing a consent banner.

Who we share with

• Our payment processor receives the order amount and reference so it can issue an invoice.
• The booster assigned to your order receives what they need to play it, and nothing else.
• Our hosting and database providers process data on our instructions to run the service.

We do not sell personal data and we do not share it for advertising purposes.

How long we keep things

• Game credentials: deleted when the order is marked complete.
• Order and payment records: retained for accounting and dispute purposes.
• Account data: retained until you ask us to delete the account.
• Server logs: rotated on a short cycle.

Your rights

If you are in the UK, EU or EEA you have the right to access, correct, export or delete your personal data, and to object to processing. Everyone gets the same treatment here regardless of where they live — email support@rankedow.com with your request and we will action it. Deleting your account removes your profile; order records tied to completed payments are kept where we are required to.

Security

Traffic is served over HTTPS. Passwords are bcrypt-hashed. Session tokens are random, server-side and revocable. Access to the order database is limited to the people who need it. No system is perfect — if you find a problem, tell us and we will fix it and credit you if you want the credit.

Children

This service is not for anyone under 18. We do not knowingly collect data from minors; if you believe we have, contact us and it will be deleted.

Contact

Privacy questions and requests: support@rankedow.com. See also the terms of service.